Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39372e302f32342d3234203d3e203138383232.roa
File:                     3139302e382e39372e302f32342d3234203d3e203138383232.roa (raw, json)
Hash identifier:          Y4Bv/KhLkZVFdjtzMWp485UoOmBdGtaolZ+Es0vD91U=
Subject key identifier:   9D:C0:C8:04:79:14:65:04:26:24:CD:E8:49:C1:4D:D1:E1:3D:BD:DC
Certificate issuer:       /CN=80B4988803C8474B92F40239B7FED3A0D057BA11
Certificate serial:       4E23FB81AA04D5FB2034C9A564E52A12BF599C64
Authority key identifier: 80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39372e302f32342d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 19:25:12 +0000
ROA not before:           Tue 01 Jul 2025 19:20:12 +0000
ROA not after:            Tue 30 Jun 2026 19:25:12 +0000
asID:                     18822
IP address blocks:        190.8.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:23:fb:81:aa:04:d5:fb:20:34:c9:a5:64:e5:2a:12:bf:59:9c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80B4988803C8474B92F40239B7FED3A0D057BA11
        Validity
            Not Before: Jul  1 19:20:12 2025 GMT
            Not After : Jun 30 19:25:12 2026 GMT
        Subject: CN=9DC0C804791465042624CDE849C14DD1E13DBDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:42:bf:a9:41:c9:35:ca:f5:68:5d:11:33:
                    46:fc:ec:02:80:f9:ab:76:7e:c1:33:4b:62:62:03:
                    42:00:a7:13:41:a0:69:7a:37:a5:46:2b:47:43:aa:
                    fc:e2:87:a2:b8:ca:f2:ee:f6:1b:65:83:39:8c:15:
                    36:16:bc:af:cd:68:38:46:85:a7:79:00:e8:38:51:
                    e3:64:ac:09:6f:ef:d5:df:98:61:47:8a:c5:ac:ae:
                    cf:44:df:a9:0f:c6:bf:46:b9:8f:f8:49:3a:34:39:
                    c3:40:9b:bb:7f:3a:f5:48:d1:6d:0e:a9:70:49:3d:
                    6a:35:7e:57:39:35:df:60:74:66:34:d5:62:e8:06:
                    42:6d:12:6f:7d:ac:31:77:e1:ea:e2:9f:29:95:40:
                    30:59:3f:33:0a:d0:e5:d2:88:0b:b0:80:25:f2:73:
                    05:2f:a0:47:bf:73:36:79:ce:12:23:ad:9d:79:5c:
                    e2:a1:53:db:db:6e:f3:b7:27:e8:3e:01:af:7c:50:
                    10:54:de:d2:71:c0:ba:fd:76:8e:30:71:f9:4d:75:
                    99:55:95:21:a1:b2:f1:af:39:b5:2e:47:8c:a6:fc:
                    78:43:8e:58:a3:f5:e1:60:0b:19:7a:87:bf:41:06:
                    bf:6d:bd:90:0c:2e:06:b2:62:25:5d:e3:fe:d3:4c:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C0:C8:04:79:14:65:04:26:24:CD:E8:49:C1:4D:D1:E1:3D:BD:DC
            X509v3 Authority Key Identifier:
                keyid:80:B4:98:88:03:C8:47:4B:92:F4:02:39:B7:FE:D3:A0:D0:57:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/80B4988803C8474B92F40239B7FED3A0D057BA11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80B4988803C8474B92F40239B7FED3A0D057BA11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D5EDBA4862DEBF8D46F5BBAE039E7F080F922827EA95916882D3AF2D8637BB6/0/3139302e382e39372e302f32342d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:72:ff:e0:b2:cc:01:a3:ca:55:d4:11:39:5c:f3:b8:92:b5:
         21:85:2e:97:82:fd:05:8f:19:bd:bb:bc:58:52:19:3c:a1:f8:
         70:86:8e:a9:38:4d:46:83:49:e4:ca:1c:58:25:ad:37:3a:04:
         e8:84:cf:89:87:da:70:5d:a9:03:2e:ef:07:b2:72:18:c3:dc:
         8e:7e:d2:a7:cc:bf:65:fe:78:6b:49:06:6c:c4:3a:2f:08:ac:
         fb:ce:10:22:6f:9b:53:3a:06:5f:c2:58:2b:1f:e4:06:97:fd:
         d8:cf:6f:b2:7c:5a:66:ff:bc:90:4a:db:7a:82:18:b3:34:e1:
         33:ce:ef:4f:2b:9e:a8:66:45:00:d2:f0:16:5f:ca:c7:0e:ef:
         da:5e:76:11:dc:07:e6:b0:5a:c6:c5:32:e3:e5:f4:06:d9:8d:
         89:b1:71:4d:e9:8d:18:12:ed:30:86:a8:3c:ed:df:e5:b1:05:
         41:08:e2:15:d8:44:1f:30:f0:eb:ce:bb:f0:1a:01:ee:56:09:
         17:4d:51:6e:d6:01:c5:e0:61:4c:0a:a3:32:aa:76:a6:86:15:
         63:56:9d:5f:b2:28:64:9a:55:54:50:32:35:df:da:8f:46:71:
         75:b9:d7:23:19:c9:03:bf:e0:be:74:67:8d:a7:29:81:c9:ec:
         08:2e:de:ae
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTiP7gaoE1fsgNMmlZOUqEr9ZnGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBCNDk4ODgwM0M4NDc0QjkyRjQwMjM5QjdGRUQzQTBE
MDU3QkExMTAeFw0yNTA3MDExOTIwMTJaFw0yNjA2MzAxOTI1MTJaMDMxMTAvBgNV
BAMTKDlEQzBDODA0NzkxNDY1MDQyNjI0Q0RFODQ5QzE0REQxRTEzREJEREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfEK/qUHJNcr1aF0RM0b87AKA
+at2fsEzS2JiA0IApxNBoGl6N6VGK0dDqvzih6K4yvLu9htlgzmMFTYWvK/NaDhG
had5AOg4UeNkrAlv79XfmGFHisWsrs9E36kPxr9GuY/4STo0OcNAm7t/OvVI0W0O
qXBJPWo1flc5Nd9gdGY01WLoBkJtEm99rDF34erinymVQDBZPzMK0OXSiAuwgCXy
cwUvoEe/czZ5zhIjrZ15XOKhU9vbbvO3J+g+Aa98UBBU3tJxwLr9do4wcflNdZlV
lSGhsvGvObUuR4ym/HhDjlij9eFgCxl6h79BBr9tvZAMLgayYiVd4/7TTMkFAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUncDIBHkUZQQmJM3oScFN0eE9vdwwHwYDVR0j
BBgwFoAUgLSYiAPIR0uS9AI5t/7ToNBXuhEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRDVFREJBNDg2MkRFQkY4RDQ2RjVCQkFFMDM5RTdGMDgw
RjkyMjgyN0VBOTU5MTY4ODJEM0FGMkQ4NjM3QkI2LzAvODBCNDk4ODgwM0M4NDc0
QjkyRjQwMjM5QjdGRUQzQTBEMDU3QkExMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEI0OTg4ODAzQzg0NzRCOTJG
NDAyMzlCN0ZFRDNBMEQwNTdCQTExLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkQ1RURCQTQ4NjJERUJGOEQ0NkY1QkJBRTAzOUU3RjA4MEY5MjI4MjdF
QTk1OTE2ODgyRDNBRjJEODYzN0JCNi8wLzMxMzkzMDJlMzgyZTM5MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvghhMA0GCSqG
SIb3DQEBCwUAA4IBAQA7cv/gsswBo8pV1BE5XPO4krUhhS6Xgv0Fjxm9u7xYUhk8
ofhwho6pOE1Gg0nkyhxYJa03OgTohM+Jh9pwXakDLu8HsnIYw9yOftKnzL9l/nhr
SQZsxDovCKz7zhAib5tTOgZfwlgrH+QGl/3Yz2+yfFpm/7yQStt6ghizNOEzzu9P
K56oZkUA0vAWX8rHDu/aXnYR3AfmsFrGxTLj5fQG2Y2JsXFN6Y0YEu0whqg87d/l
sQVBCOIV2EQfMPDrzrvwGgHuVgkXTVFu1gHF4GFMCqMyqnamhhVjVp1fsihkmlVU
UDI139qPRnF1udcjGckDv+C+dGeNpymByewILt6u
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:34:18 2025 by rpki-client